JR

Secure your enterprise... Or don't... Whatever. InfoSec Scrub / Certified n00b. All sentiments expressed are that of your employer.

[JR @rootlo0p]

@DeanTTraining Nah, if you weren’t already doing that, just pack it up. Neither brain work nor body work are for you.

[JR @rootlo0p]

@hetmehtaa Things that never happened.

[JR @rootlo0p]

@vysecurity Suggest they rotate in a new vendor.

[JR @rootlo0p]

@jeffmcjunkin Azure AD != Azure AD Domain Services 🫣

[JR @rootlo0p]

@NotMedic Do not dump the entirety of ntds.dit, unless you are explicitly instructed to do so by your client.

[JR @rootlo0p]

There's always mixed emotions when you cross a web development milestone that lets you backspace all of your angry console.log() messages.

[JR @rootlo0p]

@_wald0 https://t.co/gVx2FexEs8

[PortSwigger Research @PortSwiggerRes]

Stealing passwords from infosec Mastodon - without bypassing CSP

https://t.co/kXIqj3tpAU

[JR @rootlo0p]

@regern80 @xtremepentest winget install -e --id VideoLAN.VLC

[JR @rootlo0p]

@HackingLZ If defensive operators are informed of offensive activities, there is a zero percent chance the detections and responses are authentically representative.

[JR @rootlo0p]

@_rybaz @risk3sixty As much as I hate to use them, you've omitted a traditional vulnerability scanner from your list, and some assessments truly do warrant one. Although OpenVAS/GVM and nmap vulnerability scripts are free, they are woefully unfit to serve as core tooling for a paid assessment.

[JR @rootlo0p]

@plaverty9 @_hyp3ri0n Unlikely. Probably residing in the clear via LSASS SSP, LSA Secrets entry, or an accessible document.

[JR @rootlo0p]

@HackingLZ Because if your project sponsor and the team that hired you are in the same business unit as the SOC, then you can't trust your trusted agent. Prepare to get "detected" shortly after your status updates.

[JR @rootlo0p]

@_nwodtuhs @podalirius_ PowerShell: [System.DirectoryServices.ActiveDirectory.Forest]::GetCurrentForest().Sites.Subnets

[JR @rootlo0p]

@1njection 💀🤡

[JR @rootlo0p]

@_wald0 I support this message. If you aren't offering AD risk assessments, you're doing a disservice to your clients.

[JR @rootlo0p]

Who needs the technical content, with gold like this? #infosec

[JR @rootlo0p]

@jeffmcjunkin Aha, I'm saying: that's like the MLB banning baseball games, isn't it?

[JR @rootlo0p]

It also be like:

[Jeff McJunkin @jeffmcjunkin]

Symantec Web Gateway be like:

[JR @rootlo0p]

#RedTeam n00b Tip: If you're on a Linux box and need to port scan without nmap, try netcat.

nc -zv 10.11.12.13 1-65535 2>&1 | grep succeeded

Or loop through a list of targets:

for target in $(cat targets.txt); do nc -zv $target 1-65535 2>&1 | grep succeeded; done